AikidoSec-safe-chain/e2e/aikido-pnpm.e2e.spec.js

import { describe, it, beforeEach, afterEach } from 'node:test';
import { strict as assert } from 'node:assert';
import { createTempDir, cleanupTempDir, runAikidoCommand, isPackageManagerAvailable } from './test-helpers.js';

describe('aikido-pnpm e2e tests', () => {
  let tempDir;

  beforeEach(async () => {
    tempDir = await createTempDir();
  });

  afterEach(async () => {
    await cleanupTempDir(tempDir);
  });

  it('should allow installation of legitimate package (axios)', async () => {
    // Fail if pnpm is not available
    const pnpmAvailable = await isPackageManagerAvailable('pnpm');
    assert.ok(pnpmAvailable, 'pnpm is not available - check CI/CD configuration');

    const result = await runAikidoCommand('aikido-pnpm', ['add', 'axios'], {
      cwd: tempDir,
      timeout: 10000
    });

    // Should succeed (exit code 0) and not show malware warning
    // Note: pnpm may still exit with non-zero due to network issues, but should not show malware warnings
    assert.ok(!result.stdout.includes('MALWARE'), 'Should not detect axios as malware');
    assert.ok(!result.stderr.includes('MALWARE'), 'Should not detect axios as malware');
  });

  it('should block installation of malware package (eslint-js)', async () => {
    // Fail if pnpm is not available
    const pnpmAvailable = await isPackageManagerAvailable('pnpm');
    assert.ok(pnpmAvailable, 'pnpm is not available - check CI/CD configuration');

    const result = await runAikidoCommand('aikido-pnpm', ['add', 'eslint-js'], {
      cwd: tempDir,
      timeout: 10000
    });

    // Should fail (non-zero exit code) and show malware warning
    assert.notEqual(result.code, 0, 'Should fail when trying to install malware');
    
    // Check that malware was detected
    const output = result.stdout + result.stderr;
    assert.ok(
      output.includes('malware') || output.includes('MALWARE') || output.includes('blocked') || output.includes('dangerous') || output.includes('Malicious changes detected'),
      `Should detect malware but got: ${output}`
    );
  });

  it('should handle pnpm add with version specifiers', async () => {
    // Fail if pnpm is not available
    const pnpmAvailable = await isPackageManagerAvailable('pnpm');
    assert.ok(pnpmAvailable, 'pnpm is not available - check CI/CD configuration');

    const result = await runAikidoCommand('aikido-pnpm', ['add', 'axios@1.0.0'], {
      cwd: tempDir,
      timeout: 10000
    });

    // Should succeed with version specifier
    // Note: pnpm may still exit with non-zero due to network issues, but should not show malware warnings
    assert.ok(!result.stdout.includes('MALWARE'), 'Should not detect axios with version as malware');
  });
});